Multi-site WP: The user can only manage themes. (This is also the same view in single-site WP if the user can't install themes.) No need for tabs. Themes and plugins must be installed through the network admin.